Resolve its C&C server by sending a query to a DNS Server using the hostname “n.{BLOCKED}ianhorseriding.com”.

SOLUTION

Minimum Scan Engine: 9.850

FIRST VSAPI PATTERN FILE: 14.388.05

FIRST VSAPI PATTERN DATE: 18 Jul 2018

VSAPI OPR PATTERN File: 14.389.00

VSAPI OPR PATTERN Date: 19 Jul 2018

Scan your computer with your Trend Micro product to delete files detected as ELF_MIRAI.LBOUG. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check the following Trend Micro Support pages for more information: